Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DAC4801F4611F082DCB9BADAE4EC9C.roa
File: F1DAC4801F4611F082DCB9BADAE4EC9C.roa (raw, json)
Hash identifier: QU1vI9hcIaxmZM4YulDM5fhz97jqH7zsYNkkFemCjAA=
Subject key identifier: 40:4C:D0:CB:72:0E:7F:FF:A8:EE:BA:EE:94:92:2A:CC:AA:55:0E:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DAC4801F4611F082DCB9BADAE4EC9C.roa
Signing time: Tue 22 Apr 2025 06:56:42 +0000
ROA not before: Tue 22 Apr 2025 06:56:37 +0000
ROA not after: Wed 28 May 2025 06:56:37 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 13:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96858 (0x17a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 06:56:37 2025 GMT
Not After : May 28 06:56:37 2025 GMT
Subject: CN=68073daa-6583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:56:4a:2d:ab:b5:8b:9e:7a:cc:95:7b:d1:
b1:98:05:78:f6:a2:ea:2c:a0:0d:9b:37:f2:0c:79:
b7:ae:6b:bf:39:aa:cb:2e:c6:ec:ef:fa:e1:63:91:
33:ec:e6:9a:7c:20:25:9d:fd:4c:ab:ef:25:58:34:
7b:3c:a5:91:de:f2:17:ac:92:62:4d:b6:da:f1:9f:
81:3d:bb:38:a4:8f:d6:08:94:91:35:73:f4:d7:56:
04:44:7b:18:3b:d4:a8:fe:c5:21:32:c8:e7:41:bf:
3d:ad:15:8e:3a:d7:b8:8a:35:73:8e:46:09:cd:8c:
92:9b:6b:a5:13:59:68:1d:86:21:73:a3:bb:68:ec:
bf:63:13:1b:db:15:81:14:83:54:6f:78:8a:97:16:
6f:ec:b2:23:7f:8b:41:3a:63:f2:6c:d3:be:74:95:
41:0f:00:b6:bc:cb:2a:dd:fb:fc:88:81:4d:a6:d6:
26:46:e9:e1:6e:8e:2f:c6:26:7d:32:8f:5d:ea:cb:
0d:ab:4e:ec:88:d2:2b:7c:04:da:37:34:03:46:c0:
b6:b5:a7:c8:b3:6e:53:e6:5d:64:e4:1b:7f:7b:20:
0e:64:4a:fe:ff:d5:bc:3d:ca:a5:6e:03:ff:c2:30:
da:c4:29:0c:a1:7e:bb:f7:85:86:d8:3a:42:b5:4e:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4C:D0:CB:72:0E:7F:FF:A8:EE:BA:EE:94:92:2A:CC:AA:55:0E:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DAC4801F4611F082DCB9BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:28:8a:71:13:79:0b:46:7c:55:e4:bd:4b:d0:56:44:cc:8e:
ee:32:84:65:1f:67:02:e7:11:fc:01:76:b3:40:e6:84:25:1c:
4c:4b:9f:14:c4:39:cf:31:96:f1:8e:08:9c:91:d0:d7:93:e5:
fd:6c:7d:20:21:fd:88:8d:02:4c:11:ce:0a:84:bf:8a:35:73:
aa:c7:fc:24:ca:20:eb:6a:46:0b:ec:0f:52:81:14:22:25:9d:
69:84:a7:0d:61:ea:ef:ae:db:ae:94:75:a1:fd:7a:e9:90:5b:
8b:9e:9b:31:b7:19:7e:7e:f9:2a:23:ac:74:7a:5b:ce:00:dc:
c2:4f:ee:e9:c2:f4:62:8c:6c:6c:bc:a0:c2:10:8d:19:65:84:
f9:b2:c2:b5:83:cb:e8:f1:86:19:72:c4:81:50:4a:8b:a6:66:
68:c5:87:62:de:f8:ec:e8:41:ae:57:ae:bd:9e:e6:81:dd:bd:
66:f5:0e:93:5c:a4:0b:b3:b2:3c:dd:6c:c9:88:fb:10:fd:ac:
98:4b:38:5d:6f:44:db:8a:46:cf:dd:f3:21:cb:53:d0:22:23:
45:51:00:52:e2:bc:a2:67:f9:c5:4a:81:03:e2:df:49:50:1a:
e5:6c:47:77:81:59:b1:8c:65:1a:e4:a4:fd:8b:96:cc:6e:ef:
f9:0e:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:50 2025 by rpki-client on console.sobornost.net